cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

1020
Views
9
Helpful
6
Replies
sachpednekar
Beginner

ISE Configuration in Distributed Environment

                  Hi All,

I have quick questions about  ISE deployment in Distributed environment, as i have purchased 2 X Cisco ise 3395 - For Data Center and 3 X Cisco ISE 3355 for remote location with 3500 Base licences and 500 Advance licences.

i have some questions on this deployment

i will install 1 3395 in Primary Datacenter and other 3395 in Our secondary Data center as Primary admin+Primary Monitoring and Secondary Admin+Secondary Monitoring

and each 3355 will get installed in Remote location as policy server, My Question is it this will be correct deployment?

or while configuring 3395 do i need to configure Policy server as well in addition to Primary admin and monitoring?

or please suggest me best deployment stratagy!

Thanks,

Sachin

6 REPLIES 6
Tarik Admani
Advocate

Sachin,

How are all the sites connected (via MPLS) based on the equipment the customer must have a good WAN setup.

In most scenarios I usually position the the PSN at the central location anyways but it all depends on how the customer's network is configured.

thanks,

Tarik Admani
*Please rate helpful posts*

Thanks for the reply,

all three sites are connected in MPLS with 100MB redundant band width

we are have 2 data center one is primary and other is secondary. and all client locations are connected with 100 Meg links where i am planning to install 3355 which will act as authentication server.

but now my question is

3395 - Primary Admin+Primary Monitoring - Primary DC

3395 - Secondary Admin+ Secondary Monitoring - Secondary DC

3355- will say for one remote location(PSN)

3355- Second remote Location(PSN)

3355- third Remote location (PSN)

thanks,

Sachin

Sachin,

i would suggest the following change:

3395 - Primary Admin+Secondary Monitoring - Primary DC

3395 - Secondary Admin+ Primary Monitoring - Secondary DC

Tarik Admani
*Please rate helpful posts*

Thanks I will do.

Can I get any installation document which is prepared at the time of real time implementation ? Like authentication and authorization policy config!

Step by step guide!

Sent from Cisco Technical Support iPhone App

vikasyad
Beginner
harvisin
Participant

Create
Recognize Your Peers
Polls
Which of these topics should we host an event in the Community?

Top Choice: pxGrid (35%)

Content for Community-Ad

ISE Webinars



Did you miss a previous ISE webinar?

CiscoISE YouTube Channel